Privacy and Data Protection
Version 2.0 · Last updated 2026-08-15
This explains what Envision Dev stores when you use Ebni, where it is kept, who can reach it and who else sees it. It is written to be checkable rather than reassuring.
1. Two different sets of people
You, the business owner using Ebni — we decide how your account data is handled, and this page tells you how.
Your visitors and customers — the people who order from your store, book with you or fill in your forms. That data is yours. We hold it on your behalf, we do not decide what it is used for, and you are the one who owes those people a privacy policy of your own.
2. What we store about you
- Your name, email address and how you sign in.
- If you turn on two-step sign-in, the key your authenticator app uses. It is encrypted before it is written down, and your recovery codes are stored only as one-way hashes — we cannot read them back.
- Your invoices, what plan you are on, your account credit and every movement in it. Card numbers are handled by Paymob and never reach us.
- Everything you build: pages, products, media, settings.
- Whatever your own customers send you through your site — orders, bookings, enquiries, contact details.
- Ordinary server logs, and error reports when something breaks.
3. Where it is kept
On servers in Frankfurt, Germany, rented from DigitalOcean: the application and the database both. Your images and files are stored on Cloudflare R2. Data is not stored in Egypt, and if that matters for your business you should know it before you rely on us.
4. Who else sees it
These are all of them, and each one gets only what it needs to do its job:
- Paymob — card payments. They see the payment, we do not see the card.
- Resend — the emails we send you and your customers.
- Cloudflare — storage and delivery of your images and files.
- DigitalOcean — the servers and the database.
- Sentry — error reports. See §5.
- Google — only if you choose to sign in with a Google account.
- Anthropic and OpenAI — only when you use a feature that writes text or generates an image for you. If you never use those features, nothing goes to them.
We do not sell your data, we do not sell your customers’ data, and we do not hand either to advertisers.
5. Error reports are stripped before they leave
When something breaks we send a report so we can fix it. Before it goes, a filter removes personal and secret values — passwords, tokens, keys, phone numbers, email addresses and the like — and we have explicitly turned off the setting that would attach the signed-in user to the report. This is not a promise resting on care: the build fails if a new field is added that would reach the error service unfiltered.
6. Who on our side can reach your account
A small number of people who run the platform. When one of them opens a support session to look at your workspace, that session is recorded, and while it is open they cannot use their platform-level powers — the ones that change money — at all. Adjusting an account balance additionally requires the person to prove a second factor at the moment they do it, and every adjustment is stored with who did it, why, and the balance before and after.
7. Backups
We take database backups. We are not going to claim more than that here: whether a given backup has been copied off the machine it protects depends on how the deployment is configured, and a promise about backups we cannot verify from this page is worth nothing to you. If you need a guarantee about backup location or restore times, ask us and we will answer for your specific account.
8. How long we keep things, and deleting your data
Plainly: we do not currently delete anything automatically. There is no retention timer and no self-service “delete my account” button in Ebni today. Letting a subscription lapse takes your site offline — it does not erase anything.
If you want your data deleted or exported, email [email protected] from your account’s email address and we will do it by hand. We would rather tell you it is a manual process than describe an automatic one that does not exist. Building it properly is on our list.
9. What you can ask us for
A copy of what we hold about you; a correction; deletion; or an explanation of anything on this page. Email [email protected] from your account’s email address.
10. Cookies
What we set and why is on the cookies page.
11. Egyptian data-protection law — not yet confirmed
Egypt’s Personal Data Protection Law (Law No. 151 of 2020) is the law we expect to apply to us. We have not yet had this page, or our handling, reviewed against it by an Egyptian lawyer, so we are not going to tell you we comply with it. The previous version of this page said we did. That statement was not backed by a review, so it has been removed rather than left standing.